Using "Securing the Splunk platform with TLS" I have converted Microsoft provided certificates to pem format and verified with the "openssl verify -CAfile "CAfile.pem" "Server.pem" "  command. TLS configuration of the web interface using web.conf is successful. TLS configuration of forwarder to indexer has failed consistently using the indexer server.conf file and the forwarder server.conf file as detailed in the doc. Our deployment is very simple; 1 indexer and a collection of windows forwarders. Has anyone been able to get TLS working between forwarder - indexer on version 9+ ? Any tips on splunkd.log entries that may point to the issue(s)?   Thanks for any help. I will be out of office next week but will return Dec 30 and check this. Thanks again.   ... View more

Splunk Enterprise 8.0.2 I can send an email through our enterprise relay using python3 smtplib email.message. These come through with Content Transfer Encoding set to 7bit. When I setup and trigger an email alert action through Splunk, it fails to relay through and the Content Transfer Encoding is set to base64. That is the only difference I can detect between the 2 emails using wireshark. Is there a way to change the Splunk alert email Content transfer encoding to 7bit? I have looked at sendemail.py and sendemail_handler.py and cannot see where this is specified, it may be in another conf file or perhaps needs to be explicitly defined in one of those 2 .py files? Thank you for any help. RASmith ... View more